[14:18] 6a [15:01] When you install ubuntu it asks for an account with sudo (and other) rights. For some reason, when I am running synaptic or whatever gui-based program that needs to elevate rights, that is the account that is asked for (as opposite to the ldap account I am logged into as even though it has sudo rights). Is there a way to change that? [15:03] raubvogel: The password you type in /should/ be for the password for the currently logged-in user. [15:03] I don't have experience with ldap accounts, though I would assume it wouldn't be any different. [15:04] In my case, synaptic (to use an example) is asking for my local/initial account password [15:04] What is the verbiage? [15:06] Ok. I was able to duplicate with update manager [15:07] "An application is attempting to perform an action that requires privileges. Authentication as the suer user is required to perform this action. Password for raub:" [15:07] s/suer/super/ [15:07] I can check auth.log [15:08] What version of Ubuntu? [15:09] 11.10 and 10.10 [15:10] In 11.10 I get a similar message, but the second part reads, "Authentication is required to perform this action. Password:" [15:11] I wonder if there is behavior specific to ldap account. [15:11] I presume "sudo " works fine. [15:11] maxolasersquad: I have the same message you get with, say, synaptic and a lot of other packages. But some will do that [15:12] Oh yeah. Sudo does that. However, person with problem is a Mac guy through and through. [15:12] Command line == witchcraft [15:12] ;) [15:13] It must be the GUI permissions tool (can't think of the name.) It has other annoying behovior, like if you try to administrer a machine remotely. [15:14] On my machine (10.10), when I try the update manager, get the dialog message, and then close it, auth.log mentions nothing about my local (raub) user. http://pastebin.com/7Bx3Xm6W [15:15] policykit, that's the name of it [15:29] raubvogel: is this because your ldap user is associated to the local user as described? [15:29] raubvogel: or due to pam not picking up or redirecting auth correctly? [15:48] zoopster: local and ldap users have different usernames and uids (1000 vs 5019 for ldap) [15:52] We did that so we can make sure that, say, we can keep kerberos away from local users in /etc/pam.d/common-password